dsdfd2322 2016-11-19 02:24
浏览 25
已采纳

php使用令牌内部形式为什么令牌很重要

I have some question about access token hope you guy's have the answer, I did my research but for sure I didn't understand why using token is so important to secure forms. So my question is and I hope to understand that what token exactly do in forms, how it's secure form and secure it from what. And is the token Important in login form but what if I didn't use the token inside login form is that make the form unsecured.

  • 写回答

1条回答 默认 最新

  • dongzhen7108 2016-11-19 03:56
    关注

    Access token is one of protection patterns against CSRF attack. CSRF stands for Cross-site Request Forgery. It is deeply explained here:
    WIKI-CSRF

    Especially take a look at Examples section and Prevention section.
    In simple words this attack for example steals request with login information and lets intruder login in any time. If you have access token that is gone after session is gone or after opening the form another time, you are protected. I encourage you to read the article above.

    I hope this helped.

    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论
编辑
预览

报告相同问题?

手机看
程序员都在用的中文IT技术交流社区

程序员都在用的中文IT技术交流社区

专业的中文 IT 技术社区,与千万技术人共成长

专业的中文 IT 技术社区,与千万技术人共成长

关注【CSDN】视频号,行业资讯、技术分享精彩不断,直播好礼送不停!

关注【CSDN】视频号,行业资讯、技术分享精彩不断,直播好礼送不停!

客服 返回
顶部